It can be operated as standard windows application or as windows service. The software includes real-time reports, filtering, events correlation, database support and notification actions like e-mail and command execution based on host, facility, severity and specific message.